This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fpXajoGVhJwFgOlOEz1youK9-rw.roa File: fpXajoGVhJwFgOlOEz1youK9-rw.roa (raw, json) Hash identifier: cKj8AYjn1vU9F28GzavPSf63J1eBIRWD0fKM4mOpmL0= Subject key identifier: 7E:95:DA:8E:81:95:84:9C:05:80:E9:4E:13:3D:72:A2:E2:BD:FA:BC Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1AA17C1403320F5C4FC7C527EE725 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fpXajoGVhJwFgOlOEz1youK9-rw.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 2.56.102.0/24 maxlen: 24 2.59.23.0/24 maxlen: 24 45.86.14.0/24 maxlen: 24 45.133.220.0/24 maxlen: 24 45.133.221.0/24 maxlen: 24 45.133.222.0/24 maxlen: 24 45.133.223.0/24 maxlen: 24 45.152.203.0/24 maxlen: 24 193.5.250.0/24 maxlen: 24 193.39.244.0/24 maxlen: 24 2a07:f300::/29 maxlen: 29 2a0f:4a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:aa:17:c1:40:33:20:f5:c4:fc:7c:52:7e:e7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e95da8e8195849c0580e94e133d72a2e2bdfabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:c2:7e:63:18:e4:94:ad:4c:8d:d3:3f:21: ef:d2:8d:26:06:6b:23:f5:4f:33:cd:83:81:e1:0f: d7:ee:ed:0a:61:2b:b2:63:0a:8c:d1:c1:87:64:71: 5e:47:38:56:39:c9:db:70:79:09:57:6b:9b:c3:76: 3d:eb:52:1c:81:a2:17:25:7a:ac:53:bd:e9:46:66: 90:77:d2:1a:64:59:6f:11:43:f1:bd:4c:d4:b7:c5: ea:6b:9c:ba:15:bc:a4:31:08:5c:6f:f9:24:fd:57: ad:45:42:fc:24:cd:3a:0b:e1:0b:d1:9d:f9:c3:39: 18:4e:9f:63:ed:0f:33:ba:52:d5:36:04:1a:ae:23: bf:1c:fc:c8:a9:9b:43:48:25:34:cf:b2:f8:3c:02: e8:77:9f:fc:f9:2e:db:9e:c8:e8:74:80:16:fe:b2: eb:50:4a:71:a0:0b:9b:e6:63:f7:9a:2f:90:17:cc: 82:08:01:e0:8f:ff:28:84:2a:15:35:e8:21:1b:7c: 64:59:ca:51:10:72:6c:5b:2d:82:fc:28:27:25:a4: 55:db:44:ec:6b:6d:19:06:db:8f:c3:28:b7:af:79: 7d:a1:3d:e3:a2:0c:04:7d:a6:68:41:88:b0:cd:65: 32:88:ab:8a:b3:58:fe:2f:b1:7b:d9:0f:66:04:8f: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:DA:8E:81:95:84:9C:05:80:E9:4E:13:3D:72:A2:E2:BD:FA:BC X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fpXajoGVhJwFgOlOEz1youK9-rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.102.0/24 2.59.23.0/24 45.86.14.0/24 45.133.220.0/22 45.152.203.0/24 193.5.250.0/24 193.39.244.0/24 IPv6: 2a07:f300::/29 2a0f:4a00::/29 Signature Algorithm: sha256WithRSAEncryption b3:7a:c5:6b:47:ce:0f:8d:a8:0a:88:8f:ab:4d:b3:47:d2:51: e8:68:d1:52:9c:36:e1:09:4e:7e:03:87:34:8e:be:d5:61:a2: 0d:d8:db:2d:c7:9f:1d:90:95:f5:b4:cc:07:9c:25:00:64:74: a3:17:65:81:27:f7:36:a7:03:57:09:82:f2:67:3b:60:34:4b: 84:67:95:e5:9b:31:16:c0:bf:e8:9d:3f:90:5a:99:14:49:5d: de:e0:83:9a:d3:db:e6:3b:1b:d9:42:bb:c2:57:cc:64:be:bb: b1:fe:29:09:64:a3:69:0c:87:6a:55:f8:17:23:ac:ed:5a:bd: 63:e0:43:a0:6f:0f:b3:dd:c0:b0:dd:f7:a6:ca:ca:59:14:64: 02:de:96:e0:9d:91:36:80:4e:7e:aa:f3:da:1c:b4:be:50:dd: 43:ab:2a:36:ac:80:e5:3d:7c:c6:ce:fa:42:f9:2a:d6:e9:38: f7:b3:a8:9a:93:76:73:0f:c8:9a:7d:0a:f5:c8:08:32:50:63: 90:c1:e1:99:66:ac:4d:82:60:29:9a:e6:02:e3:01:bc:fc:47: 1f:b1:7e:47:d6:c6:ca:a1:40:06:95:2a:ff:90:78:dc:c2:d7: 06:68:a1:bc:e7:44:f9:dd:73:c0:71:e9:fe:1c:69:6e:3d:a6: 3d:e2:b3:27 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/8aoXwUAzIPXE/HxSfuclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk1ZGE4ZTgxOTU4NDljMDU4MGU5NGUxMzNkNzJhMmUyYmRmYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1rCfmMY5JStTI3TPyHv0o0mBmsj 9U8zzYOB4Q/X7u0KYSuyYwqM0cGHZHFeRzhWOcnbcHkJV2ubw3Y961IcgaIXJXqs U73pRmaQd9IaZFlvEUPxvUzUt8Xqa5y6FbykMQhcb/kk/VetRUL8JM06C+EL0Z35 wzkYTp9j7Q8zulLVNgQariO/HPzIqZtDSCU0z7L4PALod5/8+S7bnsjodIAW/rLr UEpxoAub5mP3mi+QF8yCCAHgj/8ohCoVNeghG3xkWcpREHJsWy2C/CgnJaRV20Ts a20ZBtuPwyi3r3l9oT3jogwEfaZoQYiwzWUyiKuKs1j+L7F72Q9mBI/hPQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFH6V2o6BlYScBYDpThM9cqLivfq8MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvZnBYYWpvR1ZoSndGZ09sT0V6MXlvdUs5LXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQAAjhmAwQA AjsXAwQALVYOAwQCLYXcAwQALZjLAwQAwQX6AwQAwSf0MBQEAgACMA4DBQMqB/MA AwUDKg9KADANBgkqhkiG9w0BAQsFAAOCAQEAs3rFa0fOD42oCoiPq02zR9JR6GjR Upw24QlOfgOHNI6+1WGiDdjbLcefHZCV9bTMB5wlAGR0oxdlgSf3NqcDVwmC8mc7 YDRLhGeV5ZsxFsC/6J0/kFqZFEld3uCDmtPb5jsb2UK7wlfMZL67sf4pCWSjaQyH alX4FyOs7Vq9Y+BDoG8Ps93AsN33psrKWRRkAt6W4J2RNoBOfqrz2hy0vlDdQ6sq NqyA5T18xs76Qvkq1uk497OompN2cw/Imn0K9cgIMlBjkMHhmWasTYJgKZrmAuMB vPxHH7F+R9bGyqFABpUq/5B43MLXBmihvOdE+d1zwHHp/hxpbj2mPeKzJw== -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:11 2026 by rpki-client